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DETAILED ACTION 

1 . This is in response to the RCE filed on 16 August 2006. 

2. Claims 1-16 are pending in the application. 

3. Claims 1-16 have been rejected. 

Continued Examination Under 37 CFR L114 

4. A request for continued examination under 37 CFR 1.114, including the fee set forth in 37 
CFR 1.17(e), was filed in this application after final rejection. Since this application is eligible 
for continued examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1.17(e) has been 
timely paid, the finality of the previous Office action has been v^ithdrawn pursuant to 37 CFR 
1.114. Applicant's submission filed on 16 August 2006 has been entered. 

Response to Arguments 

5. Applicant's arguments with respect to claims 1-16 have been considered but are moot in view 
of the new groimd(s) of rejection. 
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Claim Rejections - 35 USC § 112 
The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 

The specification shall conclude with one or more claims particularly pointing out and distinctly claiming the 
subject matter which the applicant regards as his invention. 

6. Claims 1-16 are rejected under 35 U.S.C. 112, second paragraph, as being indefinite for 
failing to particularly point out and distinctly claim the subject matter which applicant 
regards as the invention. 

Independent claim 1 recites the limitation "wherein computations and data associated 
with the program and data string are unintelligible and useless at the host computer". The 
examiner asserts that both the terms "unintelligible" and "useless" are relative and indefinite 
terms. 

Independent claim 15 recites the limitation "a secured computer network for executing 
encrypted computer programs at a remote host computer without sharing intelligible or otherwise 
useful program code" and "the host computer having substantially no intelligible or otherwise 
useful program code". The examiner asserts that both the terms "unintelligible" and "useless" 
are relative and indefinite terms. 

7. Claims 15 and 16 are rejected under 35 U.S.C. 112, second paragraph, as being 
indefinite in that it fails to point out what is included or excluded by the claim language. 
This claim is an omnibus type claim. 

Claim 1 5 recites the 1 limitation "the host computer having substantially no intelligible or 
otherwise usefiil program code". The term "substantially" renders the claim an omnibus type 
claim. 
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Claim Rejections - 35 USC § 102 
The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on 
sale in this country, more than one year prior to the date of application for patent in the United States. 

8. Claims 1-16 are rejected under 35 U.S.C. 102(b) as being anticipated by Silverstein et al 
U.S. Patent No. 5,677,696. 

As to claim 1, Silverstein et al discloses a method for encrypting programs for encrypted 
execution on a network having a remote host computer, comprising the steps of 

encrypting a program as a unitary matrix with n rows and n columns 
[column 4, lines 32-63]; 

encrypting an input data string to the program as a vector of length n, 
wherein execution of the program on the input data string is realized by matrix 
multiplication of the unitary matrix with the vector [column 9 line 5 1 to column 
10 line 49]; 

loading the encrypted program and the encrypted data string on the host 
computer [column 9 line 51 to column 10 line 49]; 

executing the encrypted program, using the encrypted data string, on the 
host computer [column 9 Une 51 to column 10 line 49]; 

communicating results from the host computer to the network [column 9 
line 51 to column 10 line 49]; and 
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decoding the results into output representative of executing the program 
with the data string, wherein computations and data associated with the program 
and data string are unintelligible and useless at the host computer [column 9 line 
51 to column 10 line 49]. 
As to claim 2, Silverstein et al discloses that the step of encrypting a program comprises 
converting the program to a unitary matrix muhiplication [column 9 line 51 to column 10 line 
49]. 

As to claim 3, Silverstein et al discloses that the step of converting the program 
comprises converting the program to a unitary matrix multiplication U such that U e Un for some 
integer n, where Un represents a group of unitary matrices of size n [column 4, lines 32-63]. 

As to claim 4, Silverstein et al discloses that the step of encrypting the program 
comprises generating two independent identically distributed unitary matrices X, Y from the 
uniform probability distribution over Un determined by the Haar distribution [column 9 line 51 to 
column 10 line 49]. 

As to claim 5, Silverstein et al discloses that the step of encrypting a program comprises 
the steps of computing U* as XUY* and communicating U' to the remote host computer over the 
network [column 8, lines 9-46]. 

As to claim 6, Silverstein et al discloses that the step of encrypting the input data string 
comprises converting the input data string to a vector b [column 8, lines 9-46]. 

As to claim 7, Silverstein et al discloses that the step of encrypting comprises the steps of 
computing b' as Yb and communicating b' to the remote host over the network [column 8, lines 
9-46]. 
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As to claim 8, Silverstein et al discloses that the step of executing the encrypted program, 
using the encrypted data string, on the: host computer comprises the steps of computing the 
product of XUY* and Yb and communicating results to the network [column 9, lines 24-46], 

As to claim 9, Silverstein et al discloses that the step of decoding the results into output 
comprises computing X*XUb, external of the host computer, to determine the multiplication of 
Ub as desired output of the programs wherein XUY* and Yb is (XUb) and X*XUb is obtained 
by matrix multiplication X*(XUb) [column 9, lines 24-46]. 

As to claim 10, Silverstein et al discloses the step of decoding comprises decrypting at a 
control computer connected to the network and the host computer [column 9, lines 24-46]. 

As to claim 11, Silverstein et al suggests that the network comprises the Internet [column 
3, lines 27-42]. 

As to claim 12, Silverstein et al suggests that the network comprises a virtual private 
network [column 3, lines 27-42]. 

As to claim 13, Silverstein et al suggests that the network comprises a local area network 
(LAN) [column 3, lines 27-42]. 

As to claim 14, Silverstein et al discloses embedding one or more constants into the input 
data string or program, prior to encrypting, to detect incorrect execution or data tampering 
[column 16 line 1 to column 17 line 67]. 



Application/Control Number: 09/759,402 Page 7 

Art Unit: 2131 

As to claim 15, Silverstein et al discloses a secured computer network for executing 
encrypted computer programs at a remote host computer without sharing intelligible or otherwise 
useful program code, computations or data associated with execution, comprising: 

a control computer for encrypting a program as a unitary matrix with n 
rows and n columns and for encrypting an input data string to the programs as a 
vector of length n, wherein execution of the program on the input data string is 
realized by matrix multiplication of the unitary matrix with the vecto [column 4, 
lines 32-63]r; and 

a host computer, in network with the control computer, for loading the 
encrypted program and the encrypted data string, the host computer executing the 
encrypted program, using the encrypted data string, and communicating results to 
the control computer decoding, the host computer having substantially no 
intelligible or otherwise useful program code, computations or data associated 
with execution of the encrypted program [column 9 line 51 to column 10 line 49]. 
As to claim 16, Silverstein et al discloses that the control computer embeds one or more 
constants into the unitary matrix or data string, wherein the results from the host computer 
indicate tampering or incorrect execution of the encrypted program [column 9 line 5 1 to column 
10 line 49]. 
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Conclusion 



9. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Aravind K. Moorthy whose telephone number is 571-272-3793. 
The examiner can normally be reached on Monday-Friday, 8:00-5:30. 

If attempts to reach the examiner by telephone are imsuccessful, the examiner's 
supervisor, Ayaz R. Sheikh can be reached on 571-272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



Aravind K Moorthy 
October 20, 2006 





